UsersTest.java

//
// Copyright 2010 Cinch Logic Pty Ltd.
//
// http://www.chililog.com
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//

package org.chililog.server.workbench;

import static org.junit.Assert.*;

import java.io.OutputStreamWriter;
import java.net.HttpURLConnection;
import java.net.URLEncoder;
import java.util.HashMap;
import java.util.regex.Pattern;

import org.chililog.server.common.JsonTranslator;
import org.chililog.server.data.MongoConnection;
import org.chililog.server.data.UserBO;
import org.chililog.server.data.UserController;
import org.chililog.server.data.UserBO.Status;
import org.chililog.server.workbench.WorkbenchService;
import org.chililog.server.workbench.workers.AuthenticationTokenAO;
import org.chililog.server.workbench.workers.ErrorAO;
import org.chililog.server.workbench.workers.UserAO;
import org.chililog.server.workbench.workers.Worker;
import org.jboss.netty.handler.codec.http.HttpMethod;
import org.junit.AfterClass;
import org.junit.BeforeClass;
import org.junit.Test;

import com.mongodb.BasicDBObject;
import com.mongodb.DB;
import com.mongodb.DBCollection;
import com.mongodb.DBObject;

/**
 * Test the Users API
 * 
 * @author vibul
 * 
 */
public class UsersTest {

    private static DB _db;
    private static String _systemAdminAuthToken;
    private static String _repoAdminAuthToken;
    private static String _repoWorkbenchUserAuthToken;

    @BeforeClass
    public static void classSetup() throws Exception {
        _db = MongoConnection.getInstance().getConnection();
        assertNotNull(_db);

        // Clean up old test data if any exists
        DBCollection coll = _db.getCollection(UserController.MONGODB_COLLECTION_NAME);
        Pattern pattern = Pattern.compile("^UsersTest[\\w]*$");
        DBObject query = new BasicDBObject();
        query.put("username", pattern);
        coll.remove(query);

        // Create system admin user
        UserBO user = new UserBO();
        user.setUsername("UsersTest_SystemAdmin");
        user.setEmailAddress("UsersTest_SystemAdmin@chililog.com");
        user.setPassword("hello", true);
        user.addRole(UserBO.SYSTEM_ADMINISTRATOR_ROLE_NAME);
        UserController.getInstance().save(_db, user);

        // Create repository admin user
        user = new UserBO();
        user.setUsername("UsersTest_RepoAdmin");
        user.setPassword("hello", true);
        user.setEmailAddress("UsersTest_RepoAdmin@chililog.com");
        user.addRole("repo.sandpit.administrator");
        UserController.getInstance().save(_db, user);

        // Create repository workbench user
        user = new UserBO();
        user.setUsername("UsersTest_RepoWorkbench");
        user.setPassword("hello", true);
        user.setEmailAddress("UsersTest_RepoWorkbench@chililog.com");
        user.addRole("repo.sandpit.workbench");
        UserController.getInstance().save(_db, user);

        // Start web server
        WorkbenchService.getInstance().start();

        // Login
        _systemAdminAuthToken = ApiUtils.login("UsersTest_SystemAdmin", "hello");
        _repoAdminAuthToken = ApiUtils.login("UsersTest_RepoAdmin", "hello");
        _repoWorkbenchUserAuthToken = ApiUtils.login("UsersTest_RepoWorkbench", "hello");
    }

    @AfterClass
    public static void classTeardown() {
        // Clean up old test data if any exists
        DBCollection coll = _db.getCollection(UserController.MONGODB_COLLECTION_NAME);
        Pattern pattern = Pattern.compile("^UsersTest[\\w]*$");
        DBObject query = new BasicDBObject();
        query.put("username", pattern);
        coll.remove(query);

        WorkbenchService.getInstance().stop();
    }

    /**
     * Create, Get, Update, Delete
     * 
     * @throws Exception
     */
    @Test
    public void testCRUD() throws Exception {
        HttpURLConnection httpConn;
        StringBuilder responseContent = new StringBuilder();
        StringBuilder responseCode = new StringBuilder();
        HashMap<String, String> headers = new HashMap<String, String>();

        // Create
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users", HttpMethod.POST,
                _systemAdminAuthToken);

        UserAO createRequestAO = new UserAO();
        createRequestAO.setUsername("UsersTest_crud");
        createRequestAO.setEmailAddress("UsersTest_crud@chililog.com");
        createRequestAO.setPassword("test");
        createRequestAO.setRoles(new String[] { UserBO.SYSTEM_ADMINISTRATOR_ROLE_NAME });
        createRequestAO.setStatus(Status.ENABLED);

        ApiUtils.sendJSON(httpConn, createRequestAO);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        UserAO createResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO.class);
        assertEquals("UsersTest_crud", createResponseAO.getUsername());
        assertNull(createResponseAO.getPassword());
        assertEquals(1, createResponseAO.getRoles().length);
        assertEquals(UserBO.SYSTEM_ADMINISTRATOR_ROLE_NAME, createResponseAO.getRoles()[0]);
        assertNotNull(createResponseAO.getDocumentID());
        assertEquals(new Long(1), createResponseAO.getDocumentVersion());
        assertEquals(Status.ENABLED, createResponseAO.getStatus());

        // Try to login
        ApiUtils.login("UsersTest_crud", "test");

        // Read one record
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users/" + createResponseAO.getDocumentID(),
                HttpMethod.GET, _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        UserAO readResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO.class);
        assertEquals("UsersTest_crud", readResponseAO.getUsername());
        assertEquals("UsersTest_crud@chililog.com", readResponseAO.getEmailAddress());
        assertNull(readResponseAO.getPassword());
        assertEquals(1, readResponseAO.getRoles().length);
        assertEquals(UserBO.SYSTEM_ADMINISTRATOR_ROLE_NAME, readResponseAO.getRoles()[0]);
        assertNotNull(readResponseAO.getDocumentID());
        assertEquals(new Long(1), readResponseAO.getDocumentVersion());
        assertEquals(Status.ENABLED, readResponseAO.getStatus());

        // Update
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users/" + createResponseAO.getDocumentID(),
                HttpMethod.PUT, _systemAdminAuthToken);

        readResponseAO.setUsername("UsersTest_crud_after_update");
        readResponseAO.setEmailAddress("UsersTest_crud_after_update@chililog.com");
        readResponseAO.setRoles(new String[] { "repo.chililog.workbench", "repo.sandpit.administrator" });

        ApiUtils.sendJSON(httpConn, readResponseAO);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        UserAO updateResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO.class);
        assertEquals("UsersTest_crud_after_update", updateResponseAO.getUsername());
        assertEquals("UsersTest_crud_after_update@chililog.com", updateResponseAO.getEmailAddress());
        assertNull(updateResponseAO.getPassword());
        assertEquals(2, updateResponseAO.getRoles().length);
        assertEquals("repo.chililog.workbench", updateResponseAO.getRoles()[0]);
        assertEquals("repo.sandpit.administrator", updateResponseAO.getRoles()[1]);
        assertNotNull(updateResponseAO.getDocumentID());
        assertEquals(new Long(2), updateResponseAO.getDocumentVersion());
        assertEquals(Status.ENABLED, updateResponseAO.getStatus());

        // Try to login - password not changed
        ApiUtils.login("UsersTest_crud_after_update", "test");

        // Get list
        httpConn = ApiUtils.getHttpURLConnection(
                "http://localhost:8989/api/users?username=" + URLEncoder.encode("^UsersTest[\\w]*$", "UTF-8"),
                HttpMethod.GET, _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        UserAO[] getListResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO[].class);
        assertEquals(4, getListResponseAO.length);

        // Delete
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users/" + createResponseAO.getDocumentID(),
                HttpMethod.DELETE, _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check204NoContentResponse(responseCode.toString(), headers);

        // Get record to check if it is gone
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users/" + createResponseAO.getDocumentID(),
                HttpMethod.GET, _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check400BadRequestResponse(responseCode.toString(), headers);

        ErrorAO errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Data.User.NotFoundError", errorAO.getErrorCode());
    }

    /**
     * Common tests for all repository users
     * 
     * @throws Exception
     */
    public void testRepoUser(String repoUserAuthToken) throws Exception {
        HttpURLConnection httpConn;
        StringBuilder responseContent = new StringBuilder();
        StringBuilder responseCode = new StringBuilder();
        HashMap<String, String> headers = new HashMap<String, String>();

        AuthenticationTokenAO systemAdminToken = AuthenticationTokenAO.fromString(_systemAdminAuthToken);
        AuthenticationTokenAO repoUserToken = AuthenticationTokenAO.fromString(repoUserAuthToken);

        // Get ourself - ok
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users/" + repoUserToken.getUserID(),
                HttpMethod.GET, repoUserAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        UserAO updateResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO.class);
        assertEquals(repoUserToken.getUserID(), updateResponseAO.getDocumentID());
        assertNotNull(updateResponseAO.getUsername());
        assertNull(updateResponseAO.getPassword());
        assertNull(updateResponseAO.getRoles());
        assertNull(updateResponseAO.getStatus());

        // Get list ok (unless system administrator, server will return limited information)
        httpConn = ApiUtils.getHttpURLConnection(
                "http://localhost:8989/api/users?username=" + URLEncoder.encode("^UsersTest[\\w]*$", "UTF-8"),
                HttpMethod.GET, repoUserAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        // Create - not authorized
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users", HttpMethod.POST, repoUserAuthToken);

        UserAO createRequestAO = new UserAO();
        createRequestAO.setUsername("UsersTest_crud_notauthorised");
        createRequestAO.setEmailAddress("UsersTest_crud_notauthorised@chililog.com");
        createRequestAO.setPassword("test");
        createRequestAO.setRoles(new String[] { UserBO.SYSTEM_ADMINISTRATOR_ROLE_NAME });

        ApiUtils.sendJSON(httpConn, createRequestAO);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check401UnauthorizedResponse(responseCode.toString(), headers);

        ErrorAO errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Workbench.NotAuthorizedError", errorAO.getErrorCode());

        // Update - not authorized
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users/" + systemAdminToken.getUserID(),
                HttpMethod.PUT, repoUserAuthToken);

        ApiUtils.sendJSON(httpConn, createRequestAO);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check401UnauthorizedResponse(responseCode.toString(), headers);

        errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Workbench.NotAuthorizedError", errorAO.getErrorCode());

        // Delete - not authorized
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users/" + systemAdminToken.getUserID(),
                HttpMethod.DELETE, repoUserAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check401UnauthorizedResponse(responseCode.toString(), headers);

        errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Workbench.NotAuthorizedError", errorAO.getErrorCode());
    }

    /**
     * Repo workbench user can only GET own record
     * 
     * @throws Exception
     */
    @Test
    public void testRepoWorkbenchUser() throws Exception {
        testRepoUser(_repoWorkbenchUserAuthToken);
    }

    /**
     * Repo Admin user user can only GET own record
     * 
     * @throws Exception
     */
    @Test
    public void testRepoAdminUser() throws Exception {
        testRepoUser(_repoAdminAuthToken);
    }

    /**
     * Try put and delete without an ID in URI
     * 
     * @throws Exception
     */
    @Test
    public void testMissingID() throws Exception {
        HttpURLConnection httpConn;
        StringBuilder responseContent = new StringBuilder();
        StringBuilder responseCode = new StringBuilder();
        HashMap<String, String> headers = new HashMap<String, String>();

        // Get list - OK
        httpConn = ApiUtils.getHttpURLConnection(
                "http://localhost:8989/api/users?username=" + URLEncoder.encode("^UsersTest[\\w]*$", "UTF-8"),
                HttpMethod.GET, _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        UserAO[] getListResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO[].class);
        assertEquals(3, getListResponseAO.length);

        // Update
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users", HttpMethod.PUT,
                _systemAdminAuthToken);

        OutputStreamWriter out = new OutputStreamWriter(httpConn.getOutputStream());
        JsonTranslator.getInstance().toJson(getListResponseAO[0], out);
        out.close();

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check400BadRequestResponse(responseCode.toString(), headers);

        ErrorAO errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Workbench.UriPathParameterError", errorAO.getErrorCode());

        // Delete
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users", HttpMethod.DELETE,
                _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check400BadRequestResponse(responseCode.toString(), headers);

        errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Workbench.UriPathParameterError", errorAO.getErrorCode());
    }

    /**
     * Try put without an ID in URI
     * 
     * @throws Exception
     */
    @Test
    public void testListing() throws Exception {
        HttpURLConnection httpConn;
        StringBuilder responseContent = new StringBuilder();
        StringBuilder responseCode = new StringBuilder();
        HashMap<String, String> headers = new HashMap<String, String>();

        // Get list - no records
        httpConn = ApiUtils.getHttpURLConnection(
                "http://localhost:8989/api/users?username=" + URLEncoder.encode("^xxxxxxxxx[\\w]*$", "UTF-8"),
                HttpMethod.GET, _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check204NoContentResponse(responseCode.toString(), headers);
        assertEquals("", responseContent.toString());
        assertFalse(headers.containsKey(Worker.PAGE_COUNT_HEADER));

        // Get list - page 1
        httpConn = ApiUtils.getHttpURLConnection(
                "http://localhost:8989/api/users?records_per_page=1&start_page=1&do_page_count=true&username="
                        + URLEncoder.encode("^UsersTest[\\w]*$", "UTF-8"), HttpMethod.GET, _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        UserAO[] getListResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO[].class);
        assertEquals(1, getListResponseAO.length);

        String pageCountHeader = headers.get(Worker.PAGE_COUNT_HEADER);
        assertEquals("3", pageCountHeader);

        // Get list - page 2
        httpConn = ApiUtils.getHttpURLConnection(
                "http://localhost:8989/api/users?records_per_page=1&start_page=2&username="
                        + URLEncoder.encode("^UsersTest[\\w]*$", "UTF-8"), HttpMethod.GET, _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        getListResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO[].class);
        assertEquals(1, getListResponseAO.length);
    }

    /**
     * Change password
     * 
     * @throws Exception
     */
    @Test
    public void testChangePassword() throws Exception {
        HttpURLConnection httpConn;
        StringBuilder responseContent = new StringBuilder();
        StringBuilder responseCode = new StringBuilder();
        HashMap<String, String> headers = new HashMap<String, String>();

        // Create
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users", HttpMethod.POST,
                _systemAdminAuthToken);

        UserAO createRequestAO = new UserAO();
        createRequestAO.setUsername("UsersTest_change_password");
        createRequestAO.setEmailAddress("UsersTest_change_password@chililog.com");
        createRequestAO.setPassword("test");
        createRequestAO.setRoles(new String[] { UserBO.SYSTEM_ADMINISTRATOR_ROLE_NAME });
        createRequestAO.setStatus(Status.ENABLED);

        ApiUtils.sendJSON(httpConn, createRequestAO);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        UserAO createResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO.class);
        assertEquals("UsersTest_change_password", createResponseAO.getUsername());

        // Try to login
        ApiUtils.login("UsersTest_change_password", "test");

        // Update
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users/" + createResponseAO.getDocumentID(),
                HttpMethod.PUT, _systemAdminAuthToken);

        createResponseAO.setPassword("newpassword");

        ApiUtils.sendJSON(httpConn, createResponseAO);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        // Try to login - password changed
        ApiUtils.login("UsersTest_change_password", "newpassword");
    }

    /**
     * Bad content
     * 
     * @throws Exception
     */
    @Test
    public void testBadContent() throws Exception {
        HttpURLConnection httpConn;
        StringBuilder responseContent = new StringBuilder();
        StringBuilder responseCode = new StringBuilder();
        HashMap<String, String> headers = new HashMap<String, String>();

        // Create no content
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users", HttpMethod.POST,
                _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check400BadRequestResponse(responseCode.toString(), headers);

        ErrorAO errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Workbench.RequiredContentError", errorAO.getErrorCode());

        // Create no username
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users", HttpMethod.POST,
                _systemAdminAuthToken);

        UserAO createRequestAO = new UserAO();
        createRequestAO.setPassword("test");
        createRequestAO.setRoles(new String[] { UserBO.SYSTEM_ADMINISTRATOR_ROLE_NAME });

        ApiUtils.sendJSON(httpConn, createRequestAO);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check400BadRequestResponse(responseCode.toString(), headers);

        errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Data.MongoDB.MissingRequiredFieldError", errorAO.getErrorCode());

        // Create no password
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users", HttpMethod.POST,
                _systemAdminAuthToken);

        createRequestAO = new UserAO();
        createRequestAO.setUsername("UsersTest_bad_content");
        createRequestAO.setRoles(new String[] { UserBO.SYSTEM_ADMINISTRATOR_ROLE_NAME });

        ApiUtils.sendJSON(httpConn, createRequestAO);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check400BadRequestResponse(responseCode.toString(), headers);

        errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals(
                "ChiliLogException:Error attempting to hash passwords. Error attempting to hash passwords. plainTextValue must not be null.",
                errorAO.getErrorCode());

        // Update no content
        httpConn = ApiUtils.getHttpURLConnection("http://localhost:8989/api/users/12341234", HttpMethod.PUT,
                _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check400BadRequestResponse(responseCode.toString(), headers);

        errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Workbench.RequiredContentError", errorAO.getErrorCode());

        // Update no username
        httpConn = ApiUtils.getHttpURLConnection(
                "http://localhost:8989/api/users?records_per_page=1&start_page=1&username="
                        + URLEncoder.encode("^UsersTest[\\w]*$", "UTF-8"), HttpMethod.GET, _systemAdminAuthToken);

        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check200OKResponse(responseCode.toString(), headers);

        UserAO[] getListResponseAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), UserAO[].class);
        assertEquals(1, getListResponseAO.length);

        httpConn = ApiUtils.getHttpURLConnection(
                "http://localhost:8989/api/users/" + getListResponseAO[0].getDocumentID(), HttpMethod.PUT,
                _systemAdminAuthToken);

        getListResponseAO[0].setUsername(null);

        ApiUtils.sendJSON(httpConn, getListResponseAO[0]);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check400BadRequestResponse(responseCode.toString(), headers);

        errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Data.MongoDB.MissingRequiredFieldError", errorAO.getErrorCode());

        // Update no doc version
        httpConn = ApiUtils.getHttpURLConnection(
                "http://localhost:8989/api/users/" + getListResponseAO[0].getDocumentID(), HttpMethod.PUT,
                _systemAdminAuthToken);

        getListResponseAO[0].setUsername("abc");
        getListResponseAO[0].setDocumentVersion(null);

        ApiUtils.sendJSON(httpConn, createRequestAO);
        ApiUtils.getResponse(httpConn, responseContent, responseCode, headers);
        ApiUtils.check400BadRequestResponse(responseCode.toString(), headers);

        errorAO = JsonTranslator.getInstance().fromJson(responseContent.toString(), ErrorAO.class);
        assertEquals("ChiliLogException:Workbench.RequiredFieldError", errorAO.getErrorCode());
    }

}